Comments on: Logging all BASH commands to history, and keeping people from deleting/emptying it http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/ Ramblings of a phone weenie, Linux sysadmin, and other things geeky Wed, 25 Jan 2012 03:51:49 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Phil Dufault http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-18596 Phil Dufault Thu, 29 Sep 2011 07:06:45 +0000 http://www.dufault.info/blog/?p=186#comment-18596 Good catch bogd, I am wrong. Good catch bogd, I am wrong.

]]> By: bogd http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-15963 bogd Sun, 26 Jun 2011 16:13:29 +0000 http://www.dufault.info/blog/?p=186#comment-15963 @Phil: if you're referring to thadk's comment, the trick does work. Or, to be more specific, it works if $HISTCONTROL includes ignorespace (which it does by default on some distributions). Example from Ubuntu Linux 10.04: bogd@t:~$ echo "c1" c1 bogd@t:~$ echo "c2" c2 bogd@t:~$ history | tail -n 3 504 echo "c1" 505 echo "c2" 506 history | tail -n 3 bogd@t:~$ echo "hidden" [ Notice the space before the command! ] hidden bogd@thermite:~$ history | tail -n 5 503 history 504 echo "c1" 505 echo "c2" 506 history | tail -n 3 507 history | tail -n 5 [ Missing command.... ] @Phil: if you’re referring to thadk’s comment, the trick does work. Or, to be more specific, it works if $HISTCONTROL includes ignorespace (which it does by default on some distributions).

Example from Ubuntu Linux 10.04:

bogd@t:~$ echo “c1″
c1
bogd@t:~$ echo “c2″
c2
bogd@t:~$ history | tail -n 3
504 echo “c1″
505 echo “c2″
506 history | tail -n 3
bogd@t:~$ echo “hidden”
[ Notice the space before the command! ]
hidden
bogd@thermite:~$ history | tail -n 5
503 history
504 echo “c1″
505 echo “c2″
506 history | tail -n 3
507 history | tail -n 5
[ Missing command.... ]

]]> By: VNC Log http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-12847 VNC Log Wed, 16 Feb 2011 19:27:18 +0000 http://www.dufault.info/blog/?p=186#comment-12847 [...] logs (yes, it logs, just not a whole lot) 2) Tweak their shell's history. If it's bash, here's a good article. On a side note; why are they VNC'ing into a system as root? If there's any way you can break the [...] [...] logs (yes, it logs, just not a whole lot) 2) Tweak their shell's history. If it's bash, here's a good article. On a side note; why are they VNC'ing into a system as root? If there's any way you can break the [...]

]]> By: Phil Dufault http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-8832 Phil Dufault Wed, 18 Aug 2010 19:27:56 +0000 http://www.dufault.info/blog/?p=186#comment-8832 That doesn't actually work. That doesn’t actually work.

]]> By: thadk http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-8763 thadk Thu, 12 Aug 2010 12:42:14 +0000 http://www.dufault.info/blog/?p=186#comment-8763 Does this account for the Bash trick where you leave a space at the beginning of a command to exempt it from logging to history? Does this account for the Bash trick where you leave a space at the beginning of a command to exempt it from logging to history?

]]> By: Gary http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-5822 Gary Thu, 11 Feb 2010 16:18:42 +0000 http://www.dufault.info/blog/?p=186#comment-5822 It looks like RHEL5 only references $HOME/.bashrc and /etc/bashrc when a user types bash at the prompt to open another shell so Lonny's comment is further supported. It looks like RHEL5 only references $HOME/.bashrc and /etc/bashrc when a user types bash at the prompt to open another shell so Lonny’s comment is further supported.

]]> By: Lonny http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-4791 Lonny Wed, 30 Dec 2009 18:49:23 +0000 http://www.dufault.info/blog/?p=186#comment-4791 IMHO modifications to your bash variables such as PROMPT_COMMAND are better handled in the /etc/bashrc. Moding the var there and setting the var RO was the only way to avoid errors in RH ES 5.4. Otherwise, very nice complimentary sys mod for psacct. Well done. Lonny IMHO modifications to your bash variables such as PROMPT_COMMAND are better handled in the /etc/bashrc. Moding the var there and setting the var RO was the only way to avoid errors in RH ES 5.4.

Otherwise, very nice complimentary sys mod for psacct. Well done.

Lonny

]]> By: Awesome article http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-3112 Awesome article Mon, 07 Sep 2009 05:05:32 +0000 http://www.dufault.info/blog/?p=186#comment-3112 Thanks!! Thanks!!

]]> By: Andrew Johnson http://www.dufault.info/blog/logging-all-bash-commands-to-history-and-keeping-people-from-deletingemptying-it/comment-page-1/#comment-1325 Andrew Johnson Tue, 17 Feb 2009 21:16:40 +0000 http://www.dufault.info/blog/?p=186#comment-1325 Glad to see you're back at it and with a great post no less! Glad to see you’re back at it and with a great post no less!

]]>